Guidance, with my first deb, I seekj

Jeff Bailey jbailey at ubuntu.com
Sat May 28 08:17:44 CDT 2005


Le vendredi 27 mai 2005 à 21:48 -0700, Matt Zimmerman a écrit :
> > It looks like your i386 box doesn't have gnupg installed, or you have no
> > GPG key on that machine. When doing test builds, I normally build with
> > the -uc -us options to suppress signing.
> 
> One Of These Days that really ought to become the default.  Signing should
> be part of the upload process, not the build process.

I disagree - I like to know that an instance of the build that I have
sitting there is signed and stable - then I can scp it to someplace else
and be able to trust its integrity.

But that's also why I'd like to see package signing rather than archive
signing.

Tks,
Jeff Bailey





More information about the ubuntu-devel mailing list